fanotify: Taint on use of FANOTIFY_ACCESS_PERMISSIONS
authorBen Hutchings <ben@decadent.org.uk>
Wed, 13 Jul 2016 00:37:22 +0000 (01:37 +0100)
committerBastian Blank <waldi@debian.org>
Sun, 16 Dec 2018 18:45:54 +0000 (18:45 +0000)
commitf3b87a6ff29129d44333b8c8b0a1290b1438148b
treed3f8ae9ee1b8656f9a608a7bff377b4ae8ea71c0
parent9116795b2a84c890e8d1774438310933b7fc13ae
fanotify: Taint on use of FANOTIFY_ACCESS_PERMISSIONS

Various free and proprietary AV products use this feature and users
apparently want it.  But punting access checks to userland seems like
an easy way to deadlock the system, and there will be nothing we can
do about that.  So warn and taint the kernel if this feature is
actually used.

Gbp-Pq: Topic debian
Gbp-Pq: Name fanotify-taint-on-use-of-fanotify_access_permissions.patch
fs/notify/fanotify/fanotify_user.c